- Your home network is more exposed than it should be - Your home network is more exposed than it should be. Your work laptop, banking sessions, security cameras, and smart home devices all pass through this router - a flaw here gives an attacker leverage over all of them at once.
- Calix can change settings on your router without telling you - Your ISP can access this router remotely to push updates and diagnose issues. This is normal for ISP-owned equipment, but it means there’s another party with admin access to your home network.
- A small gap that still touches every device on this network - A small gap, not an urgent one - but it still touches everything on this network: your work laptop, your phone, your security cameras, and any guest device that joins the Wi-Fi.

This router has documented security problems. Every device on this network - your work laptop, banking app, Ring camera, smart lock - is running at higher risk than it should be.
An F is not a warning - it’s a finding that the router has been independently flagged for security or supply-chain concerns serious enough to warrant action.
-
Your home network is more exposed than it should be
Your home network is more exposed than it should be. Your work laptop, banking sessions, security cameras, and smart home devices all pass through this router - a flaw here gives an attacker leverage over all of them at once.
Show technical detail
Foreign manufacture - FCC ban applies: The GigaSpire BLAST u6x is manufactured in China. The FCC's March 2026 rule applies to ISP-supplied premises equipment as well as retail routers. Contact your ISP about replacement options.
-
Calix can change settings on your router without telling you
Your ISP can access this router remotely to push updates and diagnose issues. This is normal for ISP-owned equipment, but it means there’s another party with admin access to your home network.
Show technical detail
ISP controls all configuration: Calix GigaSpire devices are fully managed by your ISP. Firmware, configuration, and remote access are all under ISP control. You cannot independently audit the firmware or configure advanced security settings.
-
A small gap that still touches every device on this network
A small gap, not an urgent one - but it still touches everything on this network: your work laptop, your phone, your security cameras, and any guest device that joins the Wi-Fi.
Show technical detail
Calix is US-headquartered - no Chinese government legal exposure: Calix Inc. is a US public company (NYSE: CALX). The concern here is manufacturing origin under the FCC rule, not corporate jurisdiction.
An A-rated alternative is shown below.
We'll email you if a new vulnerability hits your Calix GigaSpire BLAST u6x. One email per incident. No spam.
